Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
File:                     E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft (raw, json)
Hash identifier:          vEEHxKVOKK1BGIK7xJl4dvJQV734IAnhm3TngkfnXnk=
Subject key identifier:   5C:BC:6A:3F:86:8D:ED:F1:A2:7A:19:47:13:52:68:41:34:61:B3:0D
Authority key identifier: E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF
Certificate issuer:       /CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
Certificate serial:       68CF9C90EA94C48F5695EDA78D35181C8CB71B7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft
Manifest number:          01E0
Signing time:             Sat 29 Mar 2025 01:20:00 +0000
Manifest this update:     Sat 29 Mar 2025 01:15:00 +0000
Manifest next update:     Sun 30 Mar 2025 03:26:00 +0000
Files and hashes:         1: 323830343a366635343a3a2f33322d3334203d3e20323730363533.roa (hash: xf4jTxMsQXdP95qYqDMbmLLAPkTTxISTwfWFlsj+IZo=)
                          2: E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl (hash: WJXYAWPd+vOuXyVxGOPB+COQtW7TfU4HVV0Sb8fyRQU=)
                          3: 3139302e31312e3231322e302f32322d3234203d3e20323730363533.roa (hash: SLWQaLbJXAWOTLglLFO8TECCpk74xCspLU8rBVsve9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cf:9c:90:ea:94:c4:8f:56:95:ed:a7:8d:35:18:1c:8c:b7:1b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF
        Validity
            Not Before: Mar 29 01:15:00 2025 GMT
            Not After : Mar 30 03:26:00 2025 GMT
        Subject: CN=5CBC6A3F868DEDF1A27A1947135268413461B30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:74:a8:0d:cb:ba:e0:73:b9:ce:82:b9:8a:
                    0f:b8:7b:21:4f:c9:a1:ad:fb:53:50:5b:91:53:f1:
                    38:c5:35:3d:b9:fa:95:ad:85:b4:0d:b2:3d:fc:29:
                    02:0f:75:e2:76:28:09:cf:a8:57:35:44:28:9b:7c:
                    a5:5d:0d:ae:29:c2:dc:51:56:dc:aa:19:9d:1c:83:
                    89:c7:fc:27:4e:24:95:df:82:b0:c7:66:7c:a5:bd:
                    63:fd:55:21:3a:46:69:ba:ec:c6:c9:fc:7c:ae:26:
                    2c:7e:65:d0:6d:0e:12:71:fa:83:11:cf:16:2c:dd:
                    d6:bd:30:98:51:a3:94:d3:a3:ce:d4:5a:34:21:3f:
                    8f:af:ab:33:b6:e4:19:e7:2a:cd:b5:4f:b2:30:06:
                    c7:e6:63:5a:0c:1c:7a:ac:ba:c5:d6:5f:77:2e:2c:
                    de:72:7b:4d:e3:2e:f2:e7:b0:5a:84:11:21:10:56:
                    65:87:31:9f:df:91:6c:3a:d0:b5:ce:09:6f:cf:93:
                    d7:de:79:2c:70:de:4b:93:9e:bb:0b:11:b7:9f:1c:
                    78:c3:80:b3:f2:9d:f2:16:04:a1:22:45:c5:67:22:
                    b8:88:82:61:72:a1:c4:7d:30:2d:36:8e:03:b9:71:
                    10:55:fe:fe:8b:1e:34:d5:f5:7b:9c:5e:6d:0c:54:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BC:6A:3F:86:8D:ED:F1:A2:7A:19:47:13:52:68:41:34:61:B3:0D
            X509v3 Authority Key Identifier:
                keyid:E9:FF:1A:E1:1B:5D:C6:20:AA:13:1F:F8:B3:71:B9:CF:5E:78:68:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBHySkcYiPccNotMWwsEfNhUZy2JzV3SUC55JXQtk3Jv/1/E9FF1AE11B5DC620AA131FF8B371B9CF5E7868CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:21:fb:82:09:0e:80:7c:a2:76:5d:9a:4c:fd:e7:ed:b8:35:
         a8:1d:17:5c:f1:be:9a:f7:f0:d1:e6:20:60:5c:70:00:6b:a9:
         ec:3b:fb:e5:bf:b7:f9:ae:02:ac:2b:ee:9a:9c:c2:92:a6:1a:
         6a:c2:f0:2f:51:dc:e9:26:73:b5:54:88:c2:23:de:ee:dc:6f:
         30:cd:bc:cf:71:59:91:6c:65:83:3c:95:1e:f9:fd:3e:18:a7:
         a2:aa:e8:e3:f5:c4:a4:5c:81:e3:86:54:6a:99:ce:78:53:8b:
         fa:71:2d:01:33:b4:35:51:2d:52:07:4d:3f:1a:b7:1a:f1:8f:
         9c:19:ac:d8:bf:30:21:bb:ac:9a:dd:44:b3:7f:67:3a:54:83:
         0b:de:7a:e9:e0:9f:18:1d:d5:34:b0:34:06:c1:2e:2e:0d:5c:
         1a:88:85:d0:74:20:77:f5:7f:ee:bc:87:06:39:cb:56:57:e5:
         c2:bb:6b:2d:2a:88:ac:d1:cd:4d:cc:8f:9d:be:9b:8f:50:54:
         bc:a2:3b:ab:8e:56:e6:8e:b4:74:c3:f1:6d:1b:7e:66:6c:e2:
         9d:e1:68:f1:d9:64:e7:c3:53:ce:c9:60:16:d7:e7:b6:62:3c:
         47:62:47:f3:54:ca:28:ee:25:2d:f7:12:f8:a2:cc:79:61:54:
         91:69:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:14:36 2025 by rpki-client